Ivan's Blog
Tech, Mobile, Hacking, Crypto(graphy), Security and Privacy.
Dissecting the Malware Injected Into My Own Ghost Blog
tl;dr: I had not looked at my blog in months and found a malicious script injected into every post through the Ghost Admin API. What it does, and how I removed it.
-
Why embedding secrets in mobile apps is not a good idea
-
About Canada's COVID Alert application
-
OPSEC tips for the general public
-
Is the Guatemalan government asking citizens for their location to show them ads?
-
Advice for Targets of Mobile Spyware
-
Introducing security.plist
-
What checkm8 means for stalkerware on iOS
-
Decrypting iOS applications - iOS 12 Edition
-
Analyzing iOS Stalkerware Applications
-
Investigating some subscription scam iOS apps
-
Created an "age" mobile client
-
Mobile App Sec Assemble
-
Who's collecting analytics data from mobile apps?
-
Announcing my very own course: "Reverse Engineer iOS Applications" 📱
-
How Facebook-Research app works
-
Tips for Mobile Bug Bounty Hunting
-
Fix SSL Kill Switch2 not showing on Settings
-
Racism and sexism are never funny
-
What do Pointer Authentication Codes mean for iOS jailbreaking?
-
Reverse Engineering iOS Apps - iOS 11 Edition (Part 2)
-
Formatting phone numbers in Swift
-
Saving your Github SSH Keys in a USB Drive
-
Reverse Engineering iOS Apps - iOS 11 Edition (Part 1)
-
Proxy iOS 11 applications’ traffic
-
Installing self-signed certificates on Android
-
Fix Cydia Impactor crypto-osx.cpp:97 error
-
Installing Dropbear SSH on iOS 10.3.3
-
Reversing one thousand binaries
-
The most innovative “thing” I’ve done (so far)